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SUMMARY 


This  report  presents  the  results  of  a  program  that  was  con¬ 
ducted  to  provide  design  information  applicable  to  future  Army 
aircraft  relative  to  crash  sensors,  ignition-source  suppres¬ 
sion  systems,  and  circuitry  for  the  automatic  activation  of 
the  suppression  systems. 

The  program  involved  a  comprehensive  literature  search,  the  de¬ 
velopment  of  requirements  for  the  initiating  subsystem  of  the 
overall  ignition  source  control  system,  and  the  consideration 
and  comparison  of  several  illustrative  activating  circuits. 

The  development  of  a  workable  ignition-source  suppression  sys¬ 
tem  was  found  to  be  feasible.  Several  systems  have  already 
been  developed  to  cool  hot  surfaces,  to  inert  atmospheres, 
and  to  deenergize  electrical  systems.  The  areas  of  the 
ignition-source  control  problem  which  require  development  are: 
the  selection  and  the  degree  of  redundancy  of  crash  sensors, 
the  locations  of  the  sensors  on  the  aircraft,  and  the  com¬ 
plexity  of  the  activating  and  control  circuitry. 
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INTRODUCTION 


The  engineering  application  of  crashworthiness  concepts  in  the 
design  of  aircraft  structures,  seats,  and  restraint  systems  has 
shown  that  the  severity  of  the  crash  pulse  which  is  transmitted 
to  the  occupant  can  be  reduced,  and  that  the  magnitude  of  the 
reduction  enables  many  crashes  to  be  reclassified  as  survivable. 
The  actual  survivability  of  a  crash  is  therefore  often  deter¬ 
mined  by  whether  or  not  a  fire  ensues.  A  crash  fire  may  result 
in  occupant  injuries  or  fatalities  due  to  burns,  or  in  asphyxi¬ 
ation. 

The  need  for  minimizing  the  occurrence  of  postcrash  fires  and 
the  resulting  loss  of  life  and  property  has  been  recognized  for 
many  years.  The  United  States  Army  Air  Corps  conducted  a  full- 
scale  crash  fire  study  using  single-engine  aircraft  as  early  as 
1924.1  Beginning  in  1949  and  extending  through  1958,  compre¬ 
hensive  investigations  were  conducted  by  NACA/NASA  at  the  Lewis 
Flight  Propulsion  Laboratory  to  determine  the  causes  and  de¬ 
velopment  of  fires  in  both  reciprocating  engine  and  turbojet 
aircraft . 1» 2 , 3,4 , 5  An  investigation  of  the  design  require¬ 
ments  for  supersonic  transport  crash  fire  prevention  in  terms 
of  ignition  sources,  inerting  systems,  etc.,  was  completed  and 
documented  in  1963. 6  In  1970,  the  Department  of  Transportation 
supported  an  investigation  of  automotive  crash  fires  and  means 
of  preventing  the  electrical  system  from  acting  as  the  ignition 
source . 7 


As  part  of  an  effort  to  reduce  the  loss  of  personnel  and  prop¬ 
erty,  the  United  States  Army  has  sponsored  a  crash-fire  re¬ 
search  and  development  program  at  the  AvSER  Facility  of  Dynamic 
Science  for  the  past  8  years.  The  products  of  this  research 
and  development  program  have  included:  a  crash  fire  inerting 
system  for  reciprocating  engine  helicopters;®  postcrash  fire 
design  criteria  which  have  been  included  in  a  Crash  Survival 
Design  Guide;^  and  state-of-the-art  evaluations  of  emulsified 
fuels,  fuel  containment  methods,  and,  the  subject  of  this  re¬ 
port,  ignition-source  control  design  criteria. 


This  report  presents  the  results  of  a  program  which  was  con¬ 
ducted  to  provide  design  information  relative  to  crash  sensors, 
activating  circuitry,  and  ignition-source  suppression  systems. 
The  program  involved  a  literature  search,  an  operational  re¬ 
quirement  study,  and  the  generation  of  conceptual  system  de¬ 
signs  . 


•  A  comprehensive  literature  search  was  conducted  to  de¬ 
termine  system  design  philosophies  and  devices  which 
can  be  used  to  sense  a  crash,  to  deenergize  the  elec¬ 
trical  system,  or  to  shut  down  the  engines. 
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•  The  operational  requirements  of  an  ignition-source  con¬ 
trol  system  were  investigated  in  order  to  develop  per¬ 
formance  and  user  acceptance  criteria. 

•  Several  conceptual  system  designs  were  considered  and 
briefly  evaluated  relative  to  the  performance  and  user 
acceptance  criteria.  Of  prime  importance  in  the  evalu¬ 
ations  was  the  fail-safe  aspect  of  each  system. 
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IGNITION-SOURCE  DEFINITION 


Fires  can  occur  when  three  elements  are  present:  a  fuel,  an 
oxidizing  agent,  and  an  ignition  source.  Fuel  spilled  from 
fuel  tanks  which  have  been  ruptured  as  a  result  of  a  crash  is 
atomized,  mixed  with  the  surrounding  air,  and  spread  by  the 
crashed  aircraft's  deceleration  until  it  is  ignited  by  contact 
with  an  ignition  source.  The  ignition  source  increases  the 
temperature  of  the  combustible  material,  in  this  case  the  air¬ 
craft's  flammable  fluids,  to  the  temperature  at  which  ignition 
occurs.  Flammable  fluids  will  ignite  throughout  a  wide  range 
of  environmental  and  ignition-source  conditions.  Generally, 
ignition  of  spilled  combustibles  during  the  crash  occurs  as  a 
result  of  the  presence  of  one  or  more  of  the  following  sources  : 
electrical  system,  engine  flames  and/or  hot  surfaces,  heaters, 
or  sparks . 

ELECTRICAL  SYSTEM 

The  electrical  wiring  in  an  aircraft  is  a  particularly  wide¬ 
spread  potential  ignition  source.  It  is  extensively  distrib¬ 
uted  throughout  the  aircraft  to  connect  electrical  components 
to  one  another.  Combustible  fluids  can  be  ignited  when  exposed 
wires  provide  electric  arcs  between  the  wires  and  grounded  air¬ 
craft  surfaces.  Wires  can  become  exposed  as  a  result  of  being 
severed  during  the  crash  or  as  a  result  of  abrasion  of  insula¬ 
tion  by  impinging  aircraft  structure.  A  significant  aspect  of 
an  electrical  discharge  ignition  source  is  the  large  amount  of 
energy  present  relative  to  the  amount  actually  required  to  pro¬ 
duce  ignition  under  ideal  conditions.  Ignition  can  also  result 
when  flammable  fluids  come  into  contact  with  wires  that  have 
been  heated  either  as  a  result  of  short  circuiting  or  by  intent, 
e.g.,  an  incandescent  light  filament.  Incandescent  lights  are 
normally  used  during  night  flights,  and  some  landing  light 
filaments  will  sustain  temperatures  high  enough  to  cause  fuel 
ignition  for  0.75  to  1.5  seconds  after  the  light  bulb  is 
smashed  and  the  filament  broken.! 

Electrical  components  which  store  or  generate  power  are  also 
potential  ignition  sources.  Batteries  can  maintain  an  output 
capacity  for  hours  after  a  crash,  and  structural  impingement 
upon  the  battery  terminals  remains  a  threat  for  an  extended 
period  of  time.  Generators  and  inverters  maintain  power  output 
as  long  as  rotors  continue  to  rotate  and  field  circuits  are 
energized.  Batteries,  generators,  and  inverters  are  the  pri¬ 
mary  electrical  components  which  must  be  taken  into  account  in 
the  development  of  an  ignition-source  control  system. 
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ENGINE  FLAMES 


Engine  inlet  and  exhaust  flames  are  responsible  for  the  igni¬ 
tion  of  many  crash  fires.  This  ignition  source  exists  in  both 
reciprocating  engine  and  turbojet  aircraft. 

In  reciprocating  engine  aircraft,  exhaust  flames  may  result 
from  the  failure  of  spark  plugs  to  ignite  the  fuel  and  subse- 
q  lent  ignition  outside  of  the  cylinder,  or  from  failure  of 
exhaust  valves  to  contain  burning  cylinder  charges.  Since  a 
crash  does  not  necessarily  stop  an  engine  completely  or  de- 
energi ze  the  entire  electrical  system,  flashes  of  exhaust 
flames  may  occur  as  long  as  the  engine  drive  shaft  is  rotating 
and  fuel  is  being  drawn  into  the  engine.  Engine  inlet  flames 
occur  as  the  result  of  a  backfire  of  an  engine  cylinder  charge- 
out  through  the  inlet  port  and  subsequent  ignition  of  the  in¬ 
duction  system  fuel-air  mixture.  Engine  inlet  flames  may  also 
appear  for  several  minutes  after  the  crash. 

Turbojet  engines  are  highly  susceptible  to  fuel  ingestion  be¬ 
cause  of  the  long  period  of  time  required  for  the  turbine  to 
coast  to  a  stop.  If  combustor  fuel  flow  continues  after  the 
crash,  combustor  flame  will  persist  and  ingested  fuel  will  be 
ignited  immediately  upon  contact  with  this  flame.  Since  the 
ingested  fuel-air  mixture  enters  the  downstream  end  of  the 
combustor,  it  continues  to  burn  in  the  tailpipe  downstream  of 
the  turbine,  and  exhaust  flames  may  appear  at  the  tailpipe 
exit.  If  the  combustor  fuel  flow  is  cut  off,  either  inten¬ 
tionally  or  as  a  result  of  the  crash,  the  main  combustor  flame 
will  be  extinguished  but  small  residual  flames  will  result  from 
the  draining  of  the  fuel  manifold.  The  ignition  source  is 
still  present,  but  the  ingested  fuel-air  mixture  would  have  to 
be  richer  than  that  required  for  ignition  with  the  main  com¬ 
bustor  flame.  If  conditions  within  the  engine  are  such  that 
the  pressure  gradient  is  insufficient  to  pass  the  combustor 
gas  through  the  turbine,  the  combustor  flame  may  propagate  up¬ 
stream  and  exit  at  the  engine  inlet. 

ENGINE  HOT  SURFACES 


Hot  surfaces  represent  another  principal  engine  ignition  source. 
Even  if  the  fuel  flow  has  been  shut  off  and  residual  flames  are 
avoided,  the  hot  engine  metal  may  be  a  potential  igniter.  The 
temperatures  of  hot  surfaces  are  largely  determined  by  the 
level  of  engine  power  at  the  time  under  consideration.  The 
high  engine  power  required  for  takeoff  or  for  the  correction  of 
a  faulty  landing  approach  will  produce  local  temperatures  which 
are  high  enough  to  ignite  the  engine  fuel.  Even  under  normal 
operating  conditions,  some  local  hot-surface  temperatures  will 
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be  high  enough  to  ignite  the  lubricating  oil  and/or  the  hydrau¬ 
lic  fluid.  Either  of  these  ignited  fluids  may,  in  turn,  act  as 
an  ignition  source  for  the  fuel  itself.  Since  many  hot  sur¬ 
faces  will  remain  at  elevated  temperatures  for  several  minutes 
after  a  crash,  the  probability  of  flammable  fluid  ignition  as 
a  result  of  contact  with  these  surfaces  is  high.  In^an  NACA 
full-scale  crash  of  a  reciprocating  engine  aircraft,  the  tem¬ 
perature  history  of  the  exhaust  disposal  system  indicated  that 
it  took  30  seconds  for  the  hottest  portions  of  the  exhaust 
collector  ring  to  cool  below  the  minimum  fuel  ignition  tempera¬ 
ture,  and  84  seconds  to  cool  below  the  minimum  lubricating  oil 
ignition  temperature.  In  later  NACA  work  with  turbojet  air¬ 
craft,  ^  temperature  measurements  showed  that  all  the  metal 
downstream  of  the  compressor  was  above  the  ignition  tempera¬ 
tures  of  jet  fuels  and  lubricants  as  measured  in  a  laboratory. 
The  ignition  potential  of  a  hot  surface  is  also  dependent  upon 
the  length  of  time  that  the  combustible  fluid  is  in  contact 
with  the  surface.  The  relationship  between  surface  temperature 
and  contact  time  required  for  ignition  at  various  pressures  is 
shown  in  Figures  1  and  2.  The  curves  indicate  that  the  re¬ 
quired  contact  time  decreases  with  increasing  surface  tempera¬ 
ture,  and  that  ignition  is  possible  at  lower  surface  tempera¬ 
tures  for  a  given  contact  time  as  the  pressure  increases. 

The  primary  hot-surface  ignition  sources  in  reciprocating 
engines  are  the  exhaust  gas  disposal  system  and  the  cylinder 
interiors.  Ignition  sources  in  turbojet  engines  include  the 
combustor  and  transition  liners,  the  turbine,  and  the  tailcone 
and  tailpipe.  A  study  of  the  gas  velocity  through  the  hot 
zones  of  the  turbojet  engine  in  the  main  gas  stream  showed  that 
combustibles  pass  through  these  zones  too  rapidly  to  ignite 
during  the  most  likely  period  of  fuel  ingestion.^  The  study 
was  conducted  on  engines  that  are  in  the  size  category  of  the 
turbojet  engines  presently  in  use  on  rotary-wing  aircraft;  the 
results  of  the  study  are  therefore  applicable.  Although  igni¬ 
tion  probably  will  not  occur  in  the  main  gas  stream,  a  portion 
of  the  engine  gas  flow  is  diverted  to  hot  zones  in  the  engine 
where  sufficient  contact  time  for  ignition  exists.  A  brief 
description  of  three  such  turbojet  hot-surface  ignition  sources 
follows.  These  sources  are  indicated  in  the  schematic  of  a 
generalized  turbojet  engine  shown  in  Figure  3. 

1.  Combustor  liner:  The  metal  adjacent  to  the  dome  of 
the  combustor  liner  is  heated  by  the  combustor  flame 
and  is  a  prime  ignition  source.  The  residual  flames 
previously  discussed  in  conjunction  with  the  not  sur¬ 
faces  make  this  section  of  the  engine  particularly 
hazardous . 
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SPONTANEOUS-IGNITION  TEMPERATURE  -  DEGREES 


.01  .1  1  10  100 


MINIMUM  TIME  DELAY  BEFORE  IGNITION  -  SECONDS 

Figure  1.  Ignition  Characteristics  of  JP-4  Fuel; 

Ignition  Temperature  Versus  Contact 
Time  (Taken  From  Reference  4) . 
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SPONTANEOUS-IGNITION  TEMPERATURE  -  DEGREES 


J 


.0001  .001  .01  .1  1  10 


MINIMUM  TIME  DELAY  BEFORE  IGNITION  -  SECONDS 


Figure  2.  Ignition  Characteristics  of  Kerosene  and  115/145 
and  100/130  Aviation  Gasolines;  Ignition  Tempera¬ 
ture  Versus  Contact  Time  (Taken  From  Reference  4) . 
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Figure  3.  Hot-Metal  Ignition  Sources  Found  in 
Turbojet  Engine. 


2.  Transition  liner:  A  small  quantity  of  air  flows  con¬ 
tinuously  from  the  combustor  over  the  outer  surface  of 
the  transition  liner  which  joins  the  combustor  to  the 
turbine.  The  transition  liner  temperature  may  be  high 
enough  to  ignite  an  ingested  fuel-air  mixture. 

3.  Turbine:  The  gas  velocity  in  the  region  of  the  tur¬ 
bine  wheel  is  lew  enough  to  effect  sufficient  hot- 
surface  contact  time  for  ignition  to  occur. 

The  hot-surface  ignition  of  a  flammable  fluid  is  dependent  upon 
the  environmental  conditions  and  the  characteristics  of  both 
the  fluid  and  the  hot  surface,  including  temperatures  and  ther¬ 
mal  properties.  The  temperatures  within  a  body  and  on  the 
body's  surface  are,  in  turn,  dependent  upon  the  mass  of  the 
body  when  transient  conditions  must  be  considered.  Still 
another  factor  which  affects  the  probability  of  hot-surface 
ignition  is  the  ratio  of  fuel  to  air. 
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HEATERS 


The  heating-defrosting  systems  that  are  provided  in  the  cock¬ 
pit  and  passenger  compartment  areas  of  an  aircraft  are  of  a 
combustion  type  and/or  a  type  that  uses  bleed  air  from  the 
engine. 

Bleed  air  heaters  normally  use  air  from  the  compressor  section 
of  a  turbojet  engine.  Since  the  hot-surface  ignition  sources 
of  these  engines  begin  at  the  combustor  liner,  which  is  down¬ 
stream  of  the  compressor,  the  piping  system  which  carries  the 
bleed  air  to  a  mixing  chamber  should  not  produce  hot-surface 
ignition  sources.  A  temperature  survey  of  the  bleed  air  heat¬ 
ing  system  should  be  made  to  confirm  the  nonexistence  of 
ignition  sources . 

Combustion- type  heaters  are  found  in  reciprocating  engine  air¬ 
craft  and,  as  in  the  case  of  U.  S.  Army  turboshaft  rotary  air¬ 
craft,  are  often  used  as  auxiliary  heating  systems  when  cold 
weather  operation  is  anticipated.  These  systems  generate  heat 
by  the  induction  and  ignition  of  fuel  in  the  heater's  combus¬ 
tion  chamber.  It  follows  that  some  of  the  heater  surfaces  will 
reach  temperatures  which  require  that  they  be  treated  as  poten¬ 
tial  ignition  sources.  As  a  secondary  effect,  the  combustion- 
type  heaters  require  the  routing  of  additional  fuel  lines  from 
the  fuel  tanks  to  the  heaters,  and  therefore  increase  the  prob¬ 
ability  of  fuel  line  breakage  during  a  crash. 

SPARKS 


Two  types  of  sparks  that  should  be  considered  as  potential 
ignition  sources  are  friction  sparks  and  electrostatic  sparks. 
The  hot  surfaces  of  friction  sparks,  which  are  abraded  from  a 
parent  material  through  motion  relative  to  another  surface,  may 
contact  and  ignite  combustible  fluids  which  have  been  spilled 
as  a  result  of  a  crash.  The  parent  material  that  is  being 
abraded  may  also  have  temperatures  high  enough  to  ignite  com¬ 
bustible  fluids  that  it  contacts.  Electrostatic  sparks  result 
from  the  discharge  of  electrostatic  charge  which  accumulates 
on  parts  during  either  normal  operation  or  the. crash .  The 
discharge  is  triggered  during  the  crash  when  the  parts  are 
separated  from  the  aircraft  due  to  crash  forces. 

Friction  Sparks 

The  probability  that  a  friction  spark  will  ignite  a  combustible 
fuel-air  mixture  depends  on  the  characteristics  of  the  fuel  and 
the  thermal  energy  of  the  spark.  A  differentiation  may  be  made 
between  sparks  that  ignite  in  the  air  and  those  that  do  not. 
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Sparks  that  ignite  provide  ignition  sources  whose  temperatures 
are  considerably  higher  than  those  of  the  abraded  particles 
that  depend  solely  on  friction  heat.  In  general,  materials 
that  produce  ignitible  sparks  do  so  at  lower  bearing  pressures 
than  are  required  to  abrade  the  materials  that  produce  the  non- 
ignitible  friction  spark.  Additional  NACA  research^  estab¬ 
lished  that  aluminum  would  not  be  an  ignition  source,  whereas 
magnesium,  chrome-molybdenum,  stainless  steel,  and  titanium 
alloys  all  ignited  fuel  mists. 

Electrostatic  Sparks 

Electrostatic  discharge  from  a  wheel  strut  to  the  ground  caused 
ignition  of  a  fuel  mist  and,  ultimately,  the  destruction  of  an 
aircraft  being  tested  by  NACA.l  Atmospheric  and  environmental 
conditions  largely  determine  the  probability  of  occurrence  of 
this  phenomenon,  but  it  is  a  proven  potential  ignition  source 
and  must  be  treated  is  one. 


\ 
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IGNITION-SOURCE  SUPPRESSION 


ELECTRICAL  SYSTEM 


The  ignition  notential  of  an  aircraft's  electrical  system  may 
be  reduced  by  controlling  the  location  and  the  environment  of 
electrical  components,  by  disconnecting  electrical  generation 
and  storage  components  from  nonessential  circuits,  and  by  de¬ 
energizing  the  generating  components.  Both  passive  and  active 
approaches  should  be  used  to  eliminate  the  electrical  system 
as  an  ignition  source. 

Electrical  components  should  be  located  judiciously  within  the 
aircraft.  In  normal  aircraft  attitudes,  the  components  should 
be  located  so  that  they  are  above  and  away  from  flammable 
fluid  sources.  In  abnormal  attitudes,  such  as  those  which 
might  result  from  a  crash,  leaking  flammable  fluid  should  not 
be  able  to  contact  electrical  equipment  or  wiring.  Considera¬ 
tion  should  be  given  to  the  use  of  baffles,  flow  diverters  or 
drip  fences,  and  electrically  nonconductive,  flexible  shielding 
material  for  wires  and  for  paneling  the  compartments  in  which 
electrical  components  are  located.  One  type  of  drip  fence  that 
might  be  used  within  component  compartments  is  shown  in  Figure 
4.  In  effect,  the  addition  of  drain  holes  on  both  sides  of 
structural  members  such  as  stringers  enables  those  members  to 
act  as  drip  fences . 

Electrical  components  should  also  be  located  in  areas  where  the 
anticipated  crash  loadings  will  be  minimal  and  where  the  defor¬ 
mations  of  proximate  structure  will  not  result  in  structural 
impingement  on  either  the  components  or  their  wiring.  The  com¬ 
partments  in  which  electrical  components  are  located  should  be  I 

lined  with  electrically  nonconductive  shielding  material  in 
order  to  minimize  the  possibility  of  arcing  from  components  to 
structure. 

The  active  approach  to  eliminating  the  electrical  system  as  an 
ignition  source  involves  the  deenergization  and  disconnection 
of  batteries,  generators,  inverters,  and  any  other  generating 
and  storage  components  that  may  be  aboard  the  aircraft.  The 
inerting  of  the  electrical  system  should  be  accomplished  with 
speed.  Table  1^  presents  a  comprehensive  tabulation  of  the 
times  after  crash  at  which  ignitions  were  observed  in  earlier 
NACA  tests.  The  tests  were  conducted  on  reciprocating  engine 
aircraft,  but  the.results  are  generally  applicable  to  turbojet 
aircraft  as  well.  Arcing  of  the  electrical  system  caused 
ignition  1.0  second  after  a  crash,  illustrating  the  speed  with 
which  the  electrical  system  should  be  inerted. 


11 


RIB  OR  BULKHEAD 


STRINGER 


SEAL 


LIQUID-TIGHT 

SEAL 


DRAIN  HOLES 


Figure  4.  Drip  Fence  Installation  Making  Use  of 
Existing  Structural  Members. 

Relays  have  been  used  successfully  to  inert  an  aircraft  elec¬ 
trical  system.15  Ideally,  the  contacts  of  the  relays  should 
be  connected  to  satisfactorily  accomplish  each  of  the  follow¬ 
ing: 

1.  Generators  and  batteries  should  be  disconnected  from 
all  circuits  that  are  not  required  by  the  inerting 
sys  terns . 

2.  Additional  circuits  that  are  required  by  the  inerting 
systems  should  be  connected  to  a  power  source. 

3.  Disconnected  circuits  should  be  connected  to  ground  in 
order  to  bring  residual  electric  potentials  to  zero 
quickly . 
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TABLE  I.  TIME  AFTER  CRASH  AT  WHICH  IGNITION  WAS  OBSERVED 
FOR  VARIOUS  IGNITION  SOURCES  (REFERENCE  1) 


Ignition  Source 


Hot  Surfaces: 
Exhaust  System 


Heat  Exchanger 


Exhaust  Flame: 


Torching 


Exhaust  Gases 


Electrical  System: 
Arcs 

Filaments 


Induction-System  Flames 


Chemical  Agents 


Electrostatic  Sparks 


Time  After 
Crash  Impact 
Ignitions 
Observed 
(sec) 


4. 


Power  should  be  supplied  to  a  time  delay  mechanism 
that  will  result  in  the  timely  disconnection  of  all 
inerting  system  circuits.  This  action  completes  the 
disconnection  of  all  circuitry  from  the  generating 
and  storage  components. 

The  primary  components  that  should  be  disconnected  from  cir¬ 
cuitry  are  the  batteries,  generators,  and  inverters.  Since  a 
battery  can  remain  a  potential  ignition  source  for  an  extended 
period  of  time  after  a  crash,  severed  wires  that  connect  to  a 
battery  should  be  prevented  from  contacting  the  aircraft  struc¬ 
ture.  The  wires  should  be  short,  and/or  electrically  non- 
conductive  shielding  should  be  provided  to  act  as  a  buffer  be¬ 
tween  the  severed  wires  and  the  structure.  Work  done  by 
Dynamic  Science^  showed  that  the  inverter  of  the  H-21  heli¬ 
copter  that  was  tested  at  AvSER  maintained  an  output  for  .385 
second  after  the  inverter  field  circuit  had  been  deenergized. 

It  was  concluded  that  in  order  to  eliminate  the  ignition  po¬ 
tential  of  generators  and  inverters,  they  should  be  dis¬ 
connected  from  circuitry  on  their  output  sides  as  well  as  have 
their  field  circuits  opened.  Consideration  should  also  be 
given  to  grounding  the  armatures  of  components  such  as  gen¬ 
erators.  In  this  way,  the  armatures  will  be  brought  to  a  stop 
and  the  generation  of  output  voltages  will  cease. 

HOT-SURFACE  COOLING  AND  ENGINE  INERTING 

Hot  surfaces  should  be  cooled  to  temperatures  which  will  pre¬ 
clude  the  ignition  of  contacted  flammable  fluids.  The  coolant 
should  also  perform  the  function  of  surrounding  the  hot  sur¬ 
faces  with  an  inert  atmosphere  that  will  not  support  combus¬ 
tion.  The  cooling  and  inerting  systems  that  have  been  suc¬ 
cessful  in  the  past  have  provided: 

1.  A  high-discharge- rate  spray  upon  all  hot  surfaces  to 
obtain  rapid  cooling  initially. 

2.  Low-discharge- rate  sprays  over  the  surfaces  of  more 
massive  components  to  provide  a  longer  period  of  cool¬ 
ing  and  inerting. 

3.  A  follow-up  inerting-agent  spray  in  selected  regions 
if  required  by  the  engine  configuration 

Spray  times  and  coolant  quantity  requirements  will  depend  on 
the  engine  design.  A  temperature  survey  and  knowledge  of  cool¬ 
ing  rate  characteristics  for  the  engine  under  consideration  are 
required  in  order  to  design  an  adequate  cooling  and  inerting 
system.  Several  successful  systems  have  been  designed  and 
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tested  on  military  aircraft;  a  brief  discussion  of  some  of 
these  systems  follows. 

Contemporary  study  of  the  ignition-source  control  problem  be¬ 
gins  with  the  classical  NACA/NASA  work  that  was  started  in 
1949  and  extended  into  1953. ^  Full-scale  reciprocating  engine 
aircraft  crashes  were  made  in  order  to  investigate  the  mecha¬ 
nism  of  the  start  and  development  of  aircraft  crash  fires. 

The  cooling  and  inerting  system  that  was  developed  as  a  result 
of  this  investigation  is  shown  in  two  views  in  Figures  5  and  6. 
The  main  components  of  the  system  are: 

1.  A  solenoid-operated  fuel  shutoff  valve  to  prevent  the 
generation  of  flames  issuing  from  the  engine  inlet, 
tailpipe,  and  other  elements  of  a  disrupted  exhaust 
disposal  system. 

2.  A  fire-extinguishing  agent  to  inert  the  engine  induc¬ 
tion  system  fuel  that  is  present  and  flowing  through 
the  engine  before  the  fuel  shutoff  valve  closes  com¬ 
pletely. 

3.  A  system  of  water  sprays  distributed  to  give  a  simul¬ 
taneous  uniform  coverage  of  the  hot  metal  surfaces  of 
the  exhaust  disposal  system  and  the  associated  tail¬ 
pipe  heat  exchanger.  The  water  spray  cooled  the  hot 
metal  to  temperatures  that  were  safe  from  an  ignition 
standpoint,  and  also  provided  a  protective  blanket  of 
inerting  steam.  Fire  did  not  result  in  the  crashes 
of  five  aircraft  that  were  equipped  with  this  cooling 
and  inerting  system. 


Figure  5.  Schematic  Diagram  of  Ignition-Source 
Inerting  System. 
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SCHEMATIC  OF  NACELLE  INSTALLATION 


Figure  6.  Water-Spray  System  of  Ignition- Source 
Inerting  System. 

The  NACA/NASA  research  was  extended  to  include  the  development 
of  a  cooling  and  inerting  system  for  turbojet  engines. 4  The 
ignition  zones  that  were  inerted  included  the  combustor  dome, 
the  transition  liner,  the  turbine,  the  inner  cone,  and  the 
tailcone  and  tailpipe.  The  quantities  of  coolant  and  the  dura¬ 
tion  of  coolant  flow  that  were  required  for  three  turbojet 
engines  are  given  in  Table  II. 

A  portion  of  the  overall  system  is  shown  in  figure  7.  Several 
streams  of  water  issue  from  a  ring-type  mani,  Id  at  the  hub 
and  spread  centri fugally  over  the  rotating  whe  1 .  For  the  two 
engines  with  an  inner-cone  base  diaphragm,  addi  l.  onal  water 
was  discharged  on  the  downstream  face  of  the  turb:ne  wheel 
through  the  turbine  cooling  air  tube.  A  portion  of  this  water 
rebounded  and  sprayed  onto  the  base  diaphragm. 
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TABLE  II.  WATER  QUANTITIES  USED  FOR  INERTING  ENGINE  COMPONENTS  (REFERENCE  4) 
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Figure  7.  Schematic  Diagram  of  Turbine-Cooling 
System  (Reference  4)  . 


No  fires  occurred  in  six  crashes  in  which  the  inerting  system 
was  used,  while  two  airplanes  that  were  crashed  without  this 
protection  caught  fire. 

Starting  with  the  previously  mentioned  NACA/NASA  reciprocating 
engine  system,^  a  cooling  and  inerting  system  was  developed  for 
the  Wright  R-3350  turbo-compound  engines  in  the  C-119F  air¬ 
plane.  15  The  power  recovery  turbines  were  cooled  with  internal 
sprays  in  a  manner  analagous  to  that  developed  by  the  NACA/NASA 
in  its  work  with  turbojet  aircraft. 4  The  equipment  was  in¬ 
stalled  and  flight  tested  in  a  C-119F  airplane  to  determine  if 
it  could  be  depended  upon  not  to  malfunction  under  actual 
flight  environmental  conditions.  The  conclusion  of  the  inves¬ 
tigators  was  that  the  flight  testing  demonstrated  the  feasi¬ 
bility  of  providing  airworthy  and  reliable  crash  fire  preven¬ 
tion  equipment  for  aircraft. 
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NACA/NASA  continued  its  research  with  turbojet  engines  by  de¬ 
veloping  a  cooling  and  inerting  system  for  a  modified  J57 
engine. 5  This  engine  was  more  powerful  than  the  engines  wh^ch 
had  been  studied  previously,  and  produced  higher  surface  tem¬ 
peratures.  It  also  had  greater  surface  areas  to  further  aggra¬ 
vate  the  ignition  problem.  The  protection  system  that  was  de¬ 
veloped  for  this  engine  is  shown  schematically  in  Figure  8. 

The  16  gallons  of  cooling  water  was  determined  as  a  require¬ 
ment  on  the  basis  of  a  test-stand  engine  study. 

A  cooling  and  inerting  system  that  was  developed  for  use  on  re¬ 
ciprocating-engine  U.  S.  Army  helicopters  is  shown  schemati¬ 
cally  in  Figure  9.8  The  coolant  selected  for  this  system  was 
water  with  gaseous  nitrogen  added  to  rapidly  develop  an  inert 
atmosphere.  A  helicopter  crash  test  indicated  that  the  system 
operated  satisfactorily.  The  test  did  result  in  a  crash  fire, 
but  it  was  concluded  that  the  ignition  source  was  either  elec¬ 
trical  system  arcs  or  friction  sparks. 

Water  is  a  preferred  coolant  because  of  its  high  latent  heat  of 
vaporization,  its  low  molecular  weight  and  chemical  stability, 
its  availability,  and  its  low  cost.  Additives  can  be  used  to 
protect  against  freezing  of  the  water  and  corrosion  of  metallic 
members  of  the  system.  If  the  steam  produced  by  the  water  in 
contact  with  hot  surfaces  is  not  adequate  as  an  inerter,  then 
other  inerting  agents,  such  as  nitrogen  or  carbon  dioxide,  may 
be  used  as  a  complement.  The  designers  of  a  pyrotechnic  fire¬ 
extinguishing  system  indicate  that  the  system  performance  on  a 
weight  effectiveness  basis  is  superior  to  the  standard  nitrogen 
pressurized  units.16  The  pyrotechnic  unit  operated  reliably 
and  extinguished  fires  created  in  a  simulated  nacelle  over  a 
-65°F  to  +500° F  temperature  range. 

The  inerting  system  which  was  developed  as  a  result  of  the 
NACA/NASA  research  with  reciprocating  engines  (Figure  5)  in¬ 
cluded  a  fire-extinguishing  agent  to  minimize  engine  flames  as 
an  ignition  source.  In  a  turbojet  application,  shown  in  Figure 
10,  the  combustor  flames  were  eliminated  by  providing  for  rapid 
fuel  shutoff  and  draining  of  the  fuel  manifold.  The  fuel  was 
shut  off  by  a  pneumatically  operated  valve  that  was  installed 
in  the  fuel  line  between  the  engine  fuel-control  unit  and  a 
modified  pressurizing  and  dump  valve.  Simultaneously,  the 
manifold  drain  valves  and  the  pressurizing  and  dump  valve  were 
opened,  and  the  fuel  manifold  was  vented  overboard. 

HEATERS  AND  SPARKS 

A  system  that  was  developed1^  to  cool  and  inert  the  hot  sur¬ 
faces  of  a  combustion  heater  is  shown  in  Figure  11.  Spray 
nozzles  direct  the  coolant  to  the  surfaces  of  the  heater  that 
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System  for  J57  Turbojet  Engine. 
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ENGINE  FUEL 


Figure  10.  Schematic  Diagram  Showing  Fuel  Shutoff  and  Drain  System  in  J57  Engine 
Crash-Fire  Protection  System. 


COOLANT  STORAGE  TANK 


I 


23 


Figure  11.  Combustion  Heater  Cooling  System. 


have  been  indicated  as  potential  ignition  sources  by  a  thorough 
temperature  survey.  Since  the  vaporized  coolant  will  enter 
occupied  areas  of  the  aircraft,  a  coolant  should  be  chosen  that 
will  not  irritate  the  occupants. 

The  friction  spark  ignition  source  can  be  minimized  by  using 
materials  that  have  little  or  no  spark-producing  tendencies. 
Particular  attention  should  be  given  to  those  areas  of  the 
structure  where  sliding  contact  is  most  likely;  e.g.,  the 
aircraft  belly  in  the  event  of  a  landing  gear  failure.  The 
electrostatic  spark  problem  is  particularly  difficult.  The 
most  promising  solution  at  present  is  the  application  of  coat¬ 
ings  which  negate  the  buildup  of  electrostatic  charge. 
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SUPPRESSION  INITIATING  SYSTEM  REQUIREMENTS 


The  significant  work  which  remains  to  be  done  in  the  ignition- 
source  control  field  is  the  development  of  a  control  system 
that  will  sense  a  crash  and  activate  the  ignition-source  sup¬ 
pression  system. 

SYSTEM  REQUIREMENTS 

The  initiating  system  must  verify  that  the  aircraft  has  crashed 
and  that  the  resultant  damage  may  lead  to  fire.  It  must  then 
actuate  the  ignition-source  suppression  system.  These  require# 
ments  can  be  expanded  and  expressed  as  : 

1.  Unmistakenly  determine  that  a  crash  has  occurred  and 
that  the  resultant  crash  damage  may  permit  combustible 
fluids  to  contact  ignition  sources.  The  choice  and 
locations  of  crash  sensors  and  the  activating  cir¬ 
cuitry  are  critical  to  the  successful  achievement  of 
this  requirement. 

2.  Be  designed  so  that  accidental  actuation  is  not  pos¬ 
sible.  Short  circuits  in  switches  or  in  electrical 
wiring  or  malfunctioning  sensors  should  not  initiate 
the  suppression  system. 

3.  Operate  automatically  upon  receipt  of  coincident  sig¬ 
nals  from  redundant  sensors.  Accident  statistics  in¬ 
dicate  that  pilots  very  often  do  not  realize  that  they 
are  in  trouble  until  it  is  too  late,  and  fires  can 
start  and  spread  much  too  quickly  to  permit  depen¬ 
dence  upon  human  reaction  time.  The  requirements  for 
coincident  signals  from  redundant  sensors  provides  a 
fail-safe  feature  for  the  system,  and  is  closely 
connected  to  the  two  preceding  requirements. 

4.  Operate  rapidly  as  well  as  automatically.  It  is  pos¬ 
sible  for  some  crash  events  to  result  in  a  fire  almost 
immediately;  Table  I  shows  that  a  fire  started  0.1 
second  after  a  crash,  with  engine  exhaust  flames  act¬ 
ing  as  the  ignition  source. 

5.  Be  capable  of  manual  actuation  and  override.  It  is 
conceivable  that  some  crash  situations  may  not  be  de¬ 
tectable  using  sensors  without  making  the  system  un¬ 
duly  complex  and  sensitive.  It  is  imperative  that  the 
pilot  be  able  to  actuate  the  system  if  he  feels  that 
the  situation  warrants  it.  He  must  also  be  able  to 
override  signals  coming  from  sensors  if  the  crash  in¬ 
dication  is  obviously  erroneous. 
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6.  Be  capable  of  being  monitored,  checked  out,  and  reset. 
An  indicator  panel  should  be  provided  to  alert  the 
crew  to  the  actuation  of  any  sensing  element  or  to 
any  system  malfunction.  The  sensing  elements  must  be 
capable  of  being  reset  or  switched  out  of  the  acti¬ 
vating  circuitry. 

ACCEPTANCE  CONSIDERATIONS 

The  state  of  the  art  of  ignition-source  suppression  systems  is 
sufficiently  advanced  to  conclude  that  workable  systems  which 
\All  cool,  inert,  and  deenergize  are  practical.  The  accep¬ 
tance  of  the  concept  of  automatic  activation  of  these  systems 
presents  a  dilemma.  Many  existing  fire-detection  systems  have 
not  performed  well  from  the  standpoint  of  false  alarms,  and 
considering  the  potential  catastrophic  results  of  erroneous 
operation  of  a  complete  ignition-source  suppression  system, 
potential  users  are  reluctant  to  adopt  additional  systems 

associated  with  fire  hazards. 

• 

The  reliability  and  fail-safe  aspects  of  the  activating  system 
must  be  demonstrable;  the  preceding  requirements  must  be  satis¬ 
fied.  An  additional  inducement  for  acceptance  might  be  to  re¬ 
quire  that  redundant  signals  be  received  within  a  fixed  time 
interval;  otherwise,  sensors  that  are  actuated  (presumably 
falsely)  would  be  reset  or  bypassed. 
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CRASH  SENSORS 


The  sensors  that  are  used  to  detect  a  crash,  in  conjunction 
with  the  initiating  system  circuitry,  provide  the  automatic 
signal  to  the  ignition  source  suppression  system.  The  initia¬ 
ting  system  circuitry  will  be  discussed  in  a  subsequent  sec¬ 
tion  of  the  report. 

SWITCHES 


There  are  a  variety  of  sensors  available  for  use  in  the  detec¬ 
tion  of  crashes.  The  general  classifications,  which  indicate* 
the  aspect  of  the  crash  environment  being  sensed,  are  contact 
switches,  deformation  switches,  proximity  switches,  and  inertia 
switches . 

Contact  Switches 


Contact  switches  can  be  used  to  sense  an  abnormal  landing  in 
which  the  fuselage,  tail,  or  other  portion  of  the  aircraft 
normally  above  ground  is  in  contact  with  the  ground.  In  rotary¬ 
wing  aircraft,  this  type  of  switch  would  have  to  be  located  on 
the  sides  as  well  as  the  belly  of  the  aircraft.  A  rubber  strip 
contact  switch  (which  can  also  be  used  as  a  deformation  switch) 
consists  of  three  separate  electrical  wires  imbedded  separately 
in  rubber.  I5  When  the  strip  is  compressed  as  a  result  of  con¬ 
tact  with  an  object,  the  wires  are  forced  together  and  an 
electrical  circuit  is  completed.  A  second  example  of  a  con¬ 
tact  switch  might  be  the  lever-type  switch  developed  in  the 
U.S.S.R.I7  The  levers  are  located  in  aerodynamic  ally  stream¬ 
lined  enclosures  which  protrude  from  undersurfaces  of  the  air¬ 
craft.  The  levers  are  connected  mechanically  to  activating 
switches  which  complete  an  electrical  circuit.  A  final  illus¬ 
tration  of  a  contact  switch  is  the  frangible  switch  in  which 
a  signal  is  produced  as  the  result  of  the  failure  of  a  fran¬ 
gible  element  such  as  a  glass  covering. 

Deformation  Switches 


Deformation  switches  can  be  used  to  detect  severe  local  struc¬ 
tural  deformation  or  unusual  movement  of  engines,  transmis¬ 
sions,  etc.  In  the  case  of  fixed-wing  aircraft,  a  cable-type 
deformation  switch  can  be  used  to  detect  penetration  of  the 
wing  leading  edge.6# 15  since  the  fuel  tanks  of  fixed-wing  air¬ 
craft  are  normally  located  in  the  wings,  this  cable  switch  may 
also  be  used  to  indicate  fuel  tank  penetration . 3  a  schematic 
representation  of  this  switch  and  a  possible  installation  are 
shown  in  Figures  12  and  13,  respectively.  As  indicated  in  the 
preceding  paragraph,  the  rubber  strip  switch  may  also  be  used 
to  detect  structural  deformations,  and  is  more  applicable  to 


27 


Figure  12.  Cable-Type  Deformation  Switch  Schematic  (Reference  3) 
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( 


Figure  13.  Installation  of  Cable-Type  Deformation  Switch  (Reference  3). 


rotary-wing  aircraft  than  is  the  cable  switch.  A  second  cable- 
type  switch  which  would  be  adaptable  to  rotary-wing  aircraft  is 
shown  as  applied  to  a  fixed-wing  plane  in  Figure  14.3  This  is 
simply  a  limit  switch  that  is  actuated  by  an  attached  cable 
upon  displacement  of  the  landing  gear. 

Still  another  example  of  a  deformation  switch  is  shown  in 
Figure  .'.5.3  This  switch,  which  contains  a  microswitch,  can  be 
used  to  detect  abnormal  movement  of  one  part  or  component  of 
the  aircraft  relative  to  another  part.  In  the  application  of 
Figure  15,  the  switch  was  used  to  sense  breaking  away  of  the 
engine.  A  similar  switch  was  used  in  two  locations  on  a  single 
engine  to  detect  all  possible  modes  of  excessive  movement  of 
the  engine  in  its  mounts. 3-5 

Proximity  Switches 

Proximity  switches  sense  the  altitude  of  the  aircraft  to  deter¬ 
mine  if  the  aircraft  is  below  the  normal  height  at  which  it  is 
supported  by  the  landing  gear.  This  type  of  sensor  would  be 
readily  adaptable  for  use  with  fixed-wing  aircraft  but  would 
have  to  be  backed  up  by  other  types  of  sensors  for  use  on 
rotary-wing  aircraft. 

Inertia  Switches 


Inertia  switches  which  sense  changes  in  the  velocity  of  an  air¬ 
craft  can  also  be  used  as  crash  sensors.  In  general,  these 
switches  are  actuated  by  relative  displacement  between  a 
rigidly  mounted  housing  and  a  reference  mass  that  is  free  to 
slide,  roll,  or  rotate  within  the  housing.  One  type  of  inertia 
switch  would  be  a  spring-mass-dashpot  system,  where  the  mass  is 
held  against  a  seat  by  the  spring.  The  spring  force  is  set  to 
a  level  such  that  the  mass  will  lift  off  the  seat  if  the  accel¬ 
eration  is  equal  to  or  exceeds  a  desired  level.  A  crash  could 
be  indicated  either  by  having  the  mass  bridge  two  contacts  and 
close  a  circuit  after  traversing  a  short  distance  (normally 
open  circuit)  ,  or  a  contact  could  be  broken  and  a  circuit 
opened  as  soon  as  the  mass  lifted  off  the  seat  (normally  closed 
circuit)  .  A  second  type  of  inertia  switch  substitutes  a  magnet 
for  the  spring-dashpot  combination  and  operates  in  an  analogous 
manner  to  the  switch  that  was  just  discussed.  Figure  16  indi¬ 
cates  a  representative  mass-magnet  switch.  When  the  ball  is 
subjected  to  an  inertial  load  sufficient  to  overcome  the  mag¬ 
netic  force,  the  ball  breaks  free,  rises  up  the  slope  of  the 
cone,  and  strikes  a  plastic  plunger,  the  motion  of  which  opens 
an  electrical  circuit.  The  relatively  recent  Rolamite  concept 
as  applied  to  an  inertia  switch  is  shown  in  Figure  17.  The 
roller  cluster  is  held  at  a  preset  position  by  an  adjustable 
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Figure  14.  Landing  Gear  Application  of  Deformation  Switch 
(Reference  3). 
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Figure  15.  Switch  Installed  Between  Engine  Mounting  Ring  and  Engine 
to  Detect  Engine  Breakout  (Reference  3) . 


16.  Mass-Magnet  Inertia  Switch 
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Figure  17.  Low-Friction  Rolamite  Inertia  Switch. 
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stop  that  determines  the  acceleration  level  at  which  the 
switch  will  actuate.  If  the  accelerative  force  exceeds  the 
limits  of  the  adjustable  stop,  the  cluster  travels  to  the  end 
of  the  housing,  closes  electrical  contacts,  and  completes  a 
circuit. 

An  application  of  an  inertia  switch  as  a  battery  deenergizer  is 
shown  in  Figure  18.  When  the  resultant  of  the  acceleration  mag 
nitude  and  duration  exceeds  a  preset  level,  the  steel  ball, 
which  rests  in  the  conical  seat,  travels  up  the  surface  of  the 
cone  and  strikes  a  spring-loaded  metal  plate.  The  plate  is 
forced  against  a  metal  housing,  energizing  a  solenoid,  and  the 
battery  ground  is  broken.  The  second  steel  ball  within  the 
switch  will  complete  a  circuit  and  energize  the  solenoid  if  the 
switch  housing  is  tilted  more  than  90  degrees  from  the  vertical 
position  as  shown.  This  attitude  feature  of  the  switch  makes 
its  applicability  to  rotary-wing  aircraft  marginal. 

The  feasibility  of  using  acceleration  measuring  devices  as 
crash  sensors  was  investigated  for  the  U.  S.  Navy,  and  the  re¬ 
sults  of  the  study  were  published  in  1968.18  a  fundamental 
recommendation  of  the  study  was  that  other  types  of  sensors 
should  be  considered  in  place  of  acceleration  sensors.  The 
main  reason  for  the  recommendation  is  that  accelerations  are 
not  a  unique  aspect  of  a  crash,  and  therefore  it  is  difficult 
to  differentiate  accelerations  as  a  result  of  gentle  crashes 
from  those  of  operational  environments.  If  inertia  switches 
are  to  be  used,  they  should  be  applied  as  redundant  crash  indi¬ 
cators  with  a  magnitude  versus  time  interval  control  to  help 
differentiate  between  a  crash  situation  and  normal  aircraft 
movements . 

Pressure,  Rotational,  and  Thermal  Sensors 


Some  additional  sensors  that  could  be  used  to  detect  crashes 
are : 

1.  Switches  that  are  actuated  by  pressure  differentials, 
or  by  sudden  changes  in  pressures,  and  which  might  be 
installed  in  fluid  system  lines  to  detect  excessive 
pressure  drops  in  the  fuel,  oil,  and  hydraulic  systems 

2.  Switches  that  are  actuated  by  tachometers  and  which 
might  be  used  to  detect  sudden,  crash-initiated  de¬ 
creases  in  the  rotational  speeds  of  engines  or  rotor 
blades . 

3.  Thermal  sensors  that  are  actuated  by  excessive  tem¬ 
peratures,  by  radiation  from  flames,  or  by  actual 
burn-through.  This  type  of  sensor  is  marginally 
applicable  to  crash  detection  and  is  associated, 
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Figure  18.  Inertia  Switch  Applied  as  Battery  Deenergizer. 

generally,  with  the  mediocre  performance  of  some 
existing  in-flight  fire  sensing  systems. 

SENSOR  REQUIREMENTS 


The  requirements  that  are  applicable  to  any  crash  sensor  in¬ 
clude  : 

1.  Actuation  within  0.1  second  or  sensing  the  crash. 

2.  Capability  of  being  manually  actuated  and  reset. 

3.  Operational  within  environmental  conditions  exper¬ 
ienced  by  the  aircraft. 
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4.  Capability  of  being  monitored. 

5.  Fail  safe. 

INERTIA  SWITCH  TESTS 


The  inertia  switches  illustrated  in  Figures  17  and  18  were 
tested  by  Dynamic  Science. 

The  Rolamite  concept  inertia  switch  was  installed  on  the  engine 
of  a  UH-1.D/H  helicopter  airframe  that  was  drop  tested  from  a 
height  of  14  feet. 19  The  switch  experienced  acceleration  mag¬ 
nitudes  and  durations  in  excess  of  its  preset  limits  of  4G  and 
0.03  second,  respectively,  and  it  operated  satisfactorily.  The 
battery  deenergizing  inertia  switch  (Figure  18)  was  tested  in 
several  sled  impacts.  In  each  test,  although  the  resultant  of 
the  acceleration  magnitude  and  duration  was  sufficient,  the 
switch  failed  to  actuate. 

Further  testing  of  these  and  other  switches  was  planned  within 
the  original  scope  of  the  project.  However,  a  redefined,  more 
limited  scope  precluded  the  additional  testing  that  would  be 
required  for  proper  evaluation  of  these  devices. 
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ACTIVATING  CIRCUITRY 


The  activating  circuitry,  in  effect,  must  evaluate  the  validity 
of  crash  indications  that  emanate  from  the  various  crash  sen¬ 
sors  .  If  the  sensors  have  correctly  indicated  the  existence  of 
crash  conditions,  then  the  activating  circuitry  must  also  ener¬ 
gize  the  ignition  source  suppression  system.  The  activating 
circuitry  and  the  crash  sensors  comprise  the  overall  initiating 
system  that  must  satisfy  the  requirements  that  were  presented 
in  an  earlier  section  of  the  report. 

The  work  done  to  date  in  the  development  of  activating  cir¬ 
cuitry  has  been  concerned  with  multiengine,  fixed-wing  air¬ 
craft.  As  a  result,  the  prevalent  design  philosophy  incorpor¬ 
ated  the  concept  of  selective  inerting;  only  those  engines  in¬ 
volved  in  the  crash  indication  were  to  be  inerted.  Although 
this  philosophy  is  not  applicable  to  single-engine  aircraft, 
either  fixed-wing  or  rotary-wing,  it  is  still  worthwhile  to 
discuss  two  classic  activating  circuits. 

The  investigation  of  crash  fires  by  NACA/NASA  led  to  the  de¬ 
velopment  of  an  inerting  system  for  reciprocating  aircraft  and 
an  associated  initiating  sys  tem.  ^  The  proposed  activating 
circuitry  is  shown  schematically  in  Figure  19. 

A  signal  from  any  one  '-f  +  aree  switches  will  result  in  the  in¬ 
erting  of  an  engine: 

1.  An  engine  breakout  switch  indicates  when  the  crash 
impact  has  moved  the  engine  far  enough  to  b;:ook  fuel 
and  oil  lines  . 

2.  A  propeller-reduction-gear  switch  indicates  when  the 
propeller- re  duct  ion-  gear  housing  of  the  engine  breaks 
away  from  the  power  section. 

3.  A  landing  gear  switch  indicates  when  the  landing  gear 
is  tom  out. 

A  fuel  tank  penetration  switch  indicates  when  the  wing  has  been 
penetrated  and  results  in  the  deenergization  of  electrical  cir¬ 
cuits  within  the  wing. 

Either  the  inerting  of  an  engine  or  the  deenergizing  of  a 
wing's  electrical  circuits  will  cause  a  signal  to  be  sent  to 
an  arming  control  box.  This  signal,  combined  with  signals 
from  two  ground  contact  switches,  will  result  in  actuation  of 
the  entire  inerting  system.  The  requirement  for  simultaneous 
signals  from  two  ground  contact  switches  in  conjunction  with  a 
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signal  om  one  of  the  other  type  initiating  switches  reduces 
the  possibility  of  the  entire  inerting  system's  operating 
while  the  aircraft  is  still  in  the  air. 

A  second  activating  circuit  is  shown  schematically  in  Figure 
20.  This  system  was  installed  in  a  C-119F  airplane  and  flight 
tested  under  varying  flight  conditions^  to  prove  that  the 
system  could  be  depended  upon  not  to  malfunction  during  flight. 

In  this  system,  engine  damage  is  sensed  by  two  engine  reaction 
switches  while  wing  damage  is  sensed  by  two  cable-type  deforma¬ 
tion  switches.  The  actuation  of  one  switch  of  each  .type  will 
trigger  the  inerting  system  on  that  side  of  the  aircraft  and 
will  shut  off  electrical  power  in  that  wing.  Operation  of  any 
one  of  these  switches  will  cause  an  arming  signal  to  be  sent  to 
the  initiating  system  control  box.  This  signal,  as  in  the  pre¬ 
ceding  system,  when  combined  with  a  ground  contact  indication, 
will  result  in  operation  of  the  entire  inerting  system.  The 
ground  contact  signal  is  actuated  only  by  the  simultaneous 
operation  of  any  two  fuselage  deformation  switches.  The  fuse¬ 
lage  deformation  switches  were  used  as  momentary  contact  de¬ 
vices  (individual  holding  relays  were  omitted)  in  order  to 
guard  against  false  ground  contact  signals  that  might  be  pro¬ 
duced  as  a  result  of  a  brush  with  a  tree  top. 

A  schematic  of  activating  circuitry  that  could  be  applied  to 
rotary-  and  fixed-wing  single-engine  aircraft  is  shown  in 
Figure  21.  The  average  reading  of  four  proximity  switches  is 
compared  with  the  aircraft's  normal  landing  height.  If  the 
average  is  less  than  the  normal  landing  height  for  a  period  of 
time  that  is  longer  than  a  preset  minimum  duration,  then  an 
arming  signal  is  initiated.  The  proximity  arming  signal  may 
also  be  initiated  directly  by  the  pilot.  The  second  indepen¬ 
dent  arming  signal,  which  is  required  before  automatic  opera¬ 
tion  of  the  ignition-source  suppression  system,  must  be  pro¬ 
vided  by  a  generic  "hazard"  switch.  This  hazard  switch  may  be 
any  of  the  sensors  previously  discussed,  e.g.,  contact  switch 
or  deformation  switch.  Provision  is  also  made  for  a  manual 
"hazard"  input  by  the  pilot.  When  the  ARM-DISARM  switch  is  in 
the  "off"  position,  inadvertent  operation  under  normal  flight 
conditions  is  not  possible.  This  switch  also  enables  the  pilot 
to  override  the  entire  system. 
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20.  Prototype  Activating  System  Used  on  C-119F  Airplane 


Figure  21.  Potential  Activating  Circuitry  for 
Single-Engine  Aircraft. 


42 


EVALUATION  OF  SYSTEMS 


A  valid  evaluation  of  an  initiating  system  requires  that  con¬ 
sideration  be  given  to  the  sensors  and  the  activating  circuitry, 
and  the  interrelationship  between  them.  The  system  must  be 
accurate,  reliable,  automatic,  and  rapid.  The  system  must  pro¬ 
vide  for  sensor  redundancy,  manual  actuation,  override  and  re¬ 
set,  and  monitoring. 

The  systems  which  were  used  as  illustrations  all  satisfy  the 
requirements  for  automatic  operation,  for  sensor  redundancy, 
and,  although  not  necessarily  and  explicitly  indicated  on  the 
schematics,  for  manual  actuation,  override  and  reset,  and  mon¬ 
itoring.  The  remaining  requirements  are  functions  of  the  sen¬ 
sors  used,  the  particular  application,  and  the  design  phil¬ 
osophy  adopted  by  the  controlling  project  personnel.  The  types 
of  sensors,  their  locations  on  the  aircraft,  and  the  activating 
circuitry  that  would  be  required  for  rotary-wing  aircraft, 
which  are  subject  to  all  combinations  of  vertical,  lateral,  and 
longitudinal  loadings,  would  be  considerably  different  from 
those  required  for  fixed-wing  aircraft. 
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CONCLUSIONS  AND  RECOMMENDATIONS 


The  state  of  the  art  of  aircraft  ignition-source  control  sys¬ 
tems  is  advanced  to  the  point  where  workable  systems  that  will 
cool  hot  surfaces,  inert  the  atmosphere  surrounding  a  source, 
and  deenergize  electrical  systems  are  feasible.  The  areas  of 
the  ignition-source  control  problem  that  require  considerable 
development  are:  the  choice  and  the  degree  of  redundancy  of 
the  crash  sensors;  the  locations  of  the  sensors  on  the  air¬ 
craft;  and  the  complexity  of  the  activating  and  control  cir¬ 
cuitry.  The  requirements  of  rotary-wing  aircraft  with  their 
inherently  unique  crash  environments  are  in  many  ways  more  de¬ 
manding  than  the  requirements  of  fixed-wing  aircraft.  The  re¬ 
liability  of  automatic  activating  systems  must  be  clearly  demon¬ 
strable,  the  systems  must  be  proven  to  be  accurate,  and  they 
must  be  virtually  fail-safe  in  order  to  be  acceptable. 

It  is  recommended  that  future  effort  in  the  ignition-source 
control  field  be  directed  toward  solving  the  problem  of  adapta¬ 
tion  of  the  automatic  aspect  of  the  activating  system  to 
rotary-wing  aircraft.  The  development  effort  should  be  con¬ 
centrated  on  selecting  the  types  and  locations  of  sensors  and 
on  designing  the  activating  circuitry. 
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